Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/C841DE1E861611F1A1D28307CF1D38B0.roa
File:                     C841DE1E861611F1A1D28307CF1D38B0.roa (raw, json)
Hash identifier:          xF148DvKw1N5BkoihZvu3ezXIo8TmhSnM4Nklnc7rWI=
Subject key identifier:   D5:D8:35:22:01:7E:31:A6:4E:93:CD:30:17:78:5D:DB:68:E8:60:4A
Certificate issuer:       /CN=F364712FAF/serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
Certificate serial:       07F2
Authority key identifier: 3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/C841DE1E861611F1A1D28307CF1D38B0.roa
Signing time:             Wed 22 Jul 2026 21:46:24 +0000
ROA not before:           Wed 22 Jul 2026 21:46:19 +0000
ROA not after:            Wed 31 Dec 2036 21:46:19 +0000
asID:                     29975
IP address blocks:        105.245.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2034 (0x7f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364712FAF, serialNumber=3D55C784EA17912F0E960A25C6CA920E1002300A
        Validity
            Not Before: Jul 22 21:46:19 2026 GMT
            Not After : Dec 31 21:46:19 2036 GMT
        Subject: CN=6a613a2f-771e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:41:4d:d3:19:a2:a4:b8:31:3f:60:b5:5a:
                    44:e5:5d:74:fe:d9:7a:ad:c4:b2:7c:08:06:b0:db:
                    0a:f9:bb:7b:d6:cf:b7:d9:ce:cb:94:45:32:2e:5a:
                    6a:1a:2f:4f:7d:48:75:78:4b:1f:59:cc:8d:79:ed:
                    89:cd:9a:a3:50:7d:1c:c9:31:eb:9a:35:77:93:80:
                    7c:36:3d:2c:da:24:da:f3:76:0a:0c:bb:c8:de:bd:
                    2e:3c:40:86:4b:e7:59:9e:96:69:1c:f5:5d:94:fc:
                    31:6c:58:c3:50:75:78:07:5b:8c:67:7c:e0:41:67:
                    03:31:c1:88:b9:3c:18:16:67:b2:cc:7a:96:5d:c2:
                    32:71:69:eb:42:55:d5:bf:50:4b:a0:07:fc:d9:38:
                    67:46:89:cd:9e:74:3c:a1:4d:bf:84:5a:a8:ef:5d:
                    28:06:e1:73:6c:67:0e:0b:65:41:2f:b9:97:ed:3c:
                    dd:9f:81:cb:1c:ee:2b:c3:0f:08:ce:57:e3:36:b7:
                    2c:e2:a4:ae:f9:07:7b:24:a5:08:cb:e8:61:89:91:
                    1b:e5:3a:41:79:1c:20:5e:40:3d:a2:c6:c6:3a:0d:
                    1c:37:5a:e8:8f:f0:ab:99:0f:da:32:0d:48:75:51:
                    26:10:e4:db:10:30:f0:3a:9f:9a:2c:61:1d:2f:89:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:35:22:01:7E:31:A6:4E:93:CD:30:17:78:5D:DB:68:E8:60:4A
            X509v3 Authority Key Identifier:
                keyid:3D:55:C7:84:EA:17:91:2F:0E:96:0A:25:C6:CA:92:0E:10:02:30:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/PVXHhOoXkS8OlgolxsqSDhACMAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PVXHhOoXkS8OlgolxsqSDhACMAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364712F/E9C4BAA2A0E811EB88958D10F8AEA228/C841DE1E861611F1A1D28307CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.245.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:b2:6d:7d:74:62:dc:c8:f3:6e:62:2c:53:df:60:5d:7c:e5:
         95:40:69:e9:4f:f7:ba:84:77:8e:30:00:7e:05:2f:50:e2:7d:
         45:1c:90:29:f1:ec:7d:b8:99:6c:8f:33:b8:f7:1c:53:fd:b7:
         31:fd:ef:58:4e:f8:bc:84:6f:4d:68:9b:a3:83:3e:3a:1c:23:
         28:b7:3e:ba:32:51:f2:dd:17:72:c8:d9:20:8c:54:ca:14:ac:
         9d:44:c8:00:b5:f4:08:34:76:f9:dc:da:f4:b3:3d:a9:e5:be:
         0e:c9:f6:e6:45:50:08:f3:bf:9b:be:a2:01:f6:71:5b:71:b0:
         ca:f4:97:ba:e6:1f:0a:f4:de:c4:9b:9f:9b:b5:b5:1a:96:ff:
         99:5f:b6:d6:f1:f7:c8:20:34:ae:99:48:a4:c2:f7:4d:6c:6e:
         fa:00:2d:ad:af:0b:6c:ff:fe:ff:cb:13:6f:80:c1:01:db:66:
         a7:7e:c3:9e:61:28:45:4e:ae:f9:6f:cc:b3:98:36:94:6a:2a:
         c1:c7:ed:23:00:20:35:ed:fd:43:11:09:ea:24:67:ac:62:19:
         5c:03:d9:91:91:b5:8f:85:35:9d:76:f4:6c:e2:f9:77:70:86:
         68:33:7e:be:00:fc:b8:f1:84:3f:20:8f:0a:44:e5:8e:cc:6a:
         63:eb:f7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:04 2026 by rpki-client